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FIG. 1 
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20- 



NEW BILL ACCEPTOR IS INSTALLED 
AND THE SYSTEM IS POWERED UP 



22 



AUTHORIZED INSTALLER ENABLES THE 
SPECIAL SECURED SETUP MODE 



24- 



THE TRANSACTION CONTROLLER 
REQUESTS THE BILL ACCEPTOR'S 
UNIQUE MASTER KEY (MSG #11) 



26- 



TRANSACTION CONTROLLER RECEIVES THE 
BILL ACCEPTOR'S MASTER KEY (MSG #121) 
AND SAVES IT IN NON VOLATILE RAM 
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TRANSACTION CONTROLLER 

SENDS THE INITIAL 
CERTIFICATION KEY (MSG #09) 
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EXIT SPECIAL SETUP 



29- 



TRANSACTION CONTROLLER ENABLES BILL 
ACCEPTOR TO ACCEPT DOCUMENTS 



FIG. 2 
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30 



TRANSACTION CONTROLLER 
ENABLES THE BILL ACCEPTOR 



31 



USER INSERTS A BILL 
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BILL ACCEPTOR ENCRYPTS THE 
ESCROW MESSAGE AND 
SENDS IT (MSG #1) 
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TRANSACTION CONTROLLER 
DECRYPTS THE ESCROW MESSAGE 



RETURN 
MESSAGE IF 
REQUIRED 




DATA INTEGRITY 
CHECKSUM OK ? 



.NO 



36- 



35 



UNAUTHORIZED 
UNIT DETECTED 
ISSUES WARNING 



YES 



TRANSACTION CONTROLLER SENDS A 
STACK CMD. (MSG #114) 
(CONTAINING A NEW CERTIFICATION KEY) 
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BILL ACCEPTOR STORES THE BILL AND SENDS THE 
ENCRYPTED STACKED MESSAGE (MSG #3) NOTE: 
THE BILL ACCEPTOR USED THE CERTIFICATION 
KEY JUST RECEIVED IN THE "STACK" MESSAGE 
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DATA INTEGRITY 
CHECKSUM OK ? 



k NO 



39 
A. 



UNAUTHORIZED 
UNIT DETECTED 
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YES 



TRANSACTION CONTROLLER 
ISSUES CREDIT 



FIG. 3 
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41 



TRANSACTION CONTROLLER REQUESTS A 
MASTER-KEY FROM THE BILL ACCEPTOR 
DURING THE SETUP PROCESS 



42- 



TRANSACTION CONTROLLER TRANSMITS 

A CERTIFICATION-KEY TO THE BILL 
ACCEPTOR DURING THE SETUP PROCESS 



43- 



BILL ACCEPTOR FORMATS A TRANSACTION 
MESSAGE BASED ON AN EVENT 



44- 



BILL ACCEPTOR RETRIEVES STORED 
MASTER-KEY AND CERTIFICATION-KEY 



45 « 



BILL ACCEPTOR GENERATES A ENCRYPTED 
TRANSACTION MESSAGE BASED ON XOR 
OF TRANSACTION MESSAGE AND THE 
MASTER-KEY AND CERTIFICATION-KEY 
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BILL ACCEPTOR TRANSMITS THE 
ENCRYPTED TRANSACTION MESSAGE 
TO THE TRANSACTION CONTROLLER 
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TRANSACTION CONTROLLER DECRYPTS THE 
ENCRYPTED TRANSACTION MESSAGE BASED 
ON THE MASTER-KEY AND CERTIFICATION-KEY 



48- 



TRANSACTION CONTROLLER VERIFIES 
THE CHECKSUM OF THE DECRYPTED 
TRANSACTION MESSAGE 
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TRANSACTION CONTROLLER TAKES 
APPROPRIATE ACTION BASED ON THE 
RESULTS OF THE CHECKSUM 



FIG. 4 
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TRANSACTION CONTROLLER TRANSMITS A 
CERTIFICATION-KEY TO THE BILL ACCEPTOR 
DURING THE SETUP PROCESS 



52- 



BILL ACCEPTOR GENERATES A PUBLIC-KEY 
AND A PRIVATE KEY 
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BILL ACCEPTOR TRANSMITS THE PUBLIC 
KEY TO THE TRANSACTION CONTROLLER 
DURING THE SETUP PROCESS 
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BILL ACCEPTOR FORMATS A TRANSACTION 
MESSAGE BASED ON AN EVENT 



55- 



BILL ACCEPTOR GENERATES A ENCRYPTED 
TRANSACTION MESSAGE BASED ON 
THE TRANSACTION MESSAGE, THE 

CERTIFICATION-KEY, AND THE PRIVATE KEY 
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BILL ACCEPTOR TRANSMITS THE 
ENCRYPTED TRANSACTION MESSAGE 
TO THE TRANSACTION CONTROLLER 



57 



TRANSACTION CONTROLLER DECRYPTS 
THE ENCRYPTED TRANSACTION 
MESSAGE BASED ON THE PUBLIC KEY 



58- 



TRANSACTION CONTROLLER VERIFIES 
THE AUTHENTICITY AND INTEGRITY OF 
THE ENCRYPTED TRANSACTION MESSAGE 



59- 



TRANSACTION CONTROLLER TAKES 
APPROPRIATE ACTION BASED ON THE 
RESULTS OF THE VERIFICATION 



FIG. 5 
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61 



BILL ACCEPTOR USES A PSEUDO-RANDOM- 
GENERATOR WITH AN INITIAL SEED VALUE 
TO GENERATE A FIRST CERTIFICATION-KEY 
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BILL ACCEPTOR TRANSMITS THE INITIAL SEED 
VALUE TO THE TRANSACTION CONTROLLER 



63- 



TRANSACTION CONTROLLER USES THE 

INITIAL SEED VALUE AND FEDS IT TO 
THE PSEUDO-RANDOM-GENERATOR TO 
GENERATE A SECOND CERTIFICATION-KEY 



64- 



BILL ACCEPTOR ENCRYPTS THE TRANSACTION 
MESSAGE BASED ON THE RANDOM 
GENERATED FIRST CERTIFICATION-KEY 



65- 



BILL ACCEPTOR TRANSMITS THE 
ENCRYPTED TRANSACTION MESSAGE 
TO THE TRANSACTION CONTROLLER 



66- 



TRANSACTION CONTROLLER DECRYPTS 
THE TRANSACTION MESSAGE USING THE 
SECOND CERTIFICATION-KEY GENERATED 
AT THE TRANSACTION CONTROLLER 



67- 



TRANSACTION CONTROLLER AUTHENTICATES 

THE DECRYPTED MESSAGE BY COMPARING 
THE FIRST CERTIFICATION-KEY OBTAINED FROM 
THE DECRYPTED TRANSACTION MESSAGE WITH 

THE SECOND CERTIFICATION-KEY RANDOMLY 
GENERATED AT THE TRANSACTION CONTROLLER 
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TRANSACTION CONTROLLER TAKES 
APPROPRIATE ACTION BASED ON 
THE RESULTS OF AUTHENTICATION 



FIG. 6 
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71 



BA GENERATES A CURRENT- 
KEY AND A FUTURE-KEY 



72- 



BILL ACCEPTOR TRANSMITS THE FUTURE- 
KEY TO THE TRANSACTION CONTROLLER 



73- 



TRANSACTION CONTROLLER STORES THE 

FUTURE-KEY TO BE USED WHENEVER 
DECRYPTING A TRANSACTION MESSAGE 
RECEIVED FROM THE BILL ACCEPTOR 
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BILL ACCEPTOR ENCRYPTS 
TRANSACTION MESSAGE BASED ON 
THE FUTURE-KEY AND CURRENT-KEY 



75- 



BILL ACCEPTOR TRANSMITS THE 
ENCRYPTED TRANSACTION MESSAGE 
TO THE TRANSACTION CONTROLLER 
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77- 



TRANSACTION CONTROLLER RETRIEVES 
THE PREVIOUSLY STORED FUTURE-KEY 



TRANSACTION CONTROLLER DECRYPTS 
THE TRANSACTION MESSAGE 



78- 



TRANSACTION CONTROLLER AUTHENTICATES 
THE DECRYPTED MESSAGE BY COMPARING 

THE CURRENT-KEY OBTAINED FROM THE 
MESSAGE WITH THE RETRIVED FUTURE-KEY 
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TRANSACTION CONTROLLER STORES THE 
FUTURE-KEY OBTAINED FROM THE TRANSACTION 
MESSAGE TO BE USED WHENEVER 
DECRYPTING A SUBSEQUENT TRANSACTION 



FIG. 7 



